LEGAL
Privacy Policy
Last updated: 1 November 2026
This policy explains how Averan collects and uses personal data when you visit averan.eu, book a call, email us or work with us. We keep it short, we only collect what we need, and we never sell your data.
1. Who we are
The data controller is Averan, based in Cork, Ireland. For anything about your data, contact us at info@averan.eu. We are not required to appoint a Data Protection Officer, but every privacy request is handled directly by our team.
2. What we collect
- When you book a call: your name, email address, the time you choose and anything you write in the booking form (for example your business name, phone number or what you would like to improve).
- When you fill in our enquiry form: your name, business name, email, phone number if you give it, your trade and anything you write about your business.
- When you email us: your email address, name, the content of your message and any attachments.
- When you become a client: contact and billing details, and the business information needed to deliver the work (for example how your processes run, and records inside the systems we set up for you).
- When you visit the website: our hosting provider automatically processes technical data such as your IP address, browser type and the pages requested, to deliver the site and keep it secure.
Please do not send us special category data (for example health information) unless we have specifically asked for it.
3. Why we use it, and our legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Arranging and holding a call you requested, and replying to your emails | Steps taken at your request before entering a contract (6(1)(b)), or our legitimate interest in responding to enquiries (6(1)(f)) |
| Delivering services to clients, invoicing and support | Performance of a contract (6(1)(b)) |
| Keeping accounting and tax records | Legal obligation (6(1)(c)) |
| Running and securing the website | Legitimate interest in a working, secure website (6(1)(f)) |
| Occasional follow-up about a request you made | Legitimate interest (6(1)(f)). We do not send marketing newsletters, and you can ask us to stop at any time |
4. Who we share it with
We do not sell or rent personal data. We only share it with service providers who process it on our behalf, under written data processing terms:
- Google Ireland Limited (Google Workspace): our email, calendar and Google Meet video calls.
- Vercel Inc.: website hosting and delivery.
- Our accountant, bank and payment providers: for client invoicing and statutory records.
We may also disclose data where the law requires it, for example to Revenue or in response to a valid legal request.
5. International transfers
Some of our providers, or their sub-processors, may process data outside the European Economic Area, including in the United States. Where that happens, transfers are protected by the EU-U.S. Data Privacy Framework where the provider is certified, or by the European Commission’s Standard Contractual Clauses.
6. How long we keep it
- Enquiries and booking details that do not lead to work: up to 24 months after our last contact, then deleted.
- Client records, contracts and invoices: 6 years after the end of the financial year they relate to, as required by Irish tax law.
- Website server logs: kept by our hosting provider for a short period for security purposes, in line with its own retention settings.
7. Your rights
Under the GDPR you have the right to access your data, to have it corrected or deleted, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time without affecting earlier processing. To use any of these rights, email info@averan.eu. We will reply within one month, and we may ask you to confirm your identity first.
If you are unhappy with how we handle your data, please tell us so we can try to fix it. You also have the right to complain to the Data Protection Commission, Ireland’s data protection authority.
8. Security
We use reputable providers, encrypted connections (HTTPS), two-factor authentication on our accounts and access limited to the people who need it. No system is completely secure, but we take reasonable steps to protect your data and will notify you and the Data Protection Commission of a breach where the law requires it.
9. Changes to this policy
We will update this page if the way we handle data changes. The date at the top shows when it was last revised. Cookies are covered separately in our Cookie Policy.